VYPR

Kkfileview

by Sg Summer

CVEs (1)

  • CVE-2026-88592CriSep 16, 2026
    risk 0.59cvss 9.1epss 0.00

    kkFileView >= 4.2.0 is vulnerable to Server-Side Request Forgery (SSRF). The cross-origin file proxy endpoint /getCorsFile is protected by TrustHostFilter against the trust.host whitelist. However, the URL parameter validated by the filter is not the same parameter the…